Bufferlist Project

bufferlist_project

1 CVE • 1 product

Products (1)

Click to collapse

Toggle

Bufferlist

bufferlist

1 CVE

CVEs (1)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2020-8244 2Bufferlist Project Debian 2Bufferlist Debian Linux Jun 17, 2026 Aug 30, 2020 N/A· v4 6.5 MEDIUM· v3 6.4 MEDIUM· v2 A buffer over-read vulnerability exists in bl <4.0.3, <3.0.1, <2.2.1, and <1.2.3 which could allow an attacker to supply user input (even typed) that if it ends up in consume() argument and can become negative, the Buffe...Show more A buffer over-read vulnerability exists in bl <4.0.3, <3.0.1, <2.2.1, and <1.2.3 which could allow an attacker to supply user input (even typed) that if it ends up in consume() argument and can become negative, the BufferList state can be corrupted, tricking it into exposing uninitialized memory via regular .slice() calls.Show less

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2020-8244

2Bufferlist Project

Debian

2Bufferlist

Debian Linux

Jun 17, 2026

Aug 30, 2020

N/A· v4

6.5 MEDIUM· v3

6.4 MEDIUM· v2

A buffer over-read vulnerability exists in bl <4.0.3, <3.0.1, <2.2.1, and <1.2.3 which could allow an attacker to supply user input (even typed) that if it ends up in consume() argument and can become negative, the BufferList state can be corrupted, tricking it into exposing uninitialized memory via regular .slice() calls.Show less